This sequence will accept and answer any query from any address., though I would expect it to REFUSE all queries from any address except 10.0.0.0/8 and queries to domain example.com. What is wrong with my approach?